Quiz: TLS

Question 1 of 10

Why curl does not trust a certificate — expiry, name or issuer, how to issue a certificate with the same key, what nginx sends at the start of TLS and how to send HTTP to HTTPS. The questions follow the lessons “Trust, name and expiry of a certificate” and “HTTPS in nginx: chain and redirect”.

10 questions · threshold 70%

Read the output

What will you do so that www.shop.lab.test opens without an error?

$ curl https://www.shop.lab.test/
curl: (60) SSL: no alternative certificate subject name matches target host name 'www.shop.lab.test'
$ openssl x509 -in /etc/nginx/tls/shop.crt -noout -ext subjectAltName
X509v3 Subject Alternative Name:
    DNS:shop.lab.test

Issue a certificate with both names in the SAN and put it into nginx.
Add www.shop.lab.test to server_name.
Open the site with curl -k.
Issue a certificate with CN = www.shop.lab.test in the subject.

A–D or ↵ Sign in to answer